Difference between revisions of "Load"
Jump to navigation
Jump to search
| Line 24: | Line 24: | ||
Load can ingest the files and folders. | Load can ingest the files and folders. | ||
If the file is one of the following disk image formats, it will be opened, partitions and filesystems navigated, freespace gathered, files carved, etc. | If the file is one of the following disk image formats, it will be opened, partitions and filesystems navigated, freespace gathered, files carved, etc. | ||
| − | * Raw (dd) | + | * Raw ([https://en.wikipedia.org/wiki/Dd_(Unix) dd]) |
| + | * E01 - Expert Witness Disk Image | ||
| + | * L01 - Expert Witness Logical Files | ||
| + | * [https://en.wikipedia.org/wiki/ISO_image ISO] - CD/DVD disc image | ||
| + | |||
| + | The following file systems are supported | ||
| + | * [https://en.wikipedia.org/wiki/File_Allocation_Table FAT] | ||
| + | * [https://en.wikipedia.org/wiki/NTFS NTFS] | ||
Revision as of 09:24, 22 July 2020
| Executable | Load.exe
|
| Stage | 1 |
| Percent Complete | 48% |
| Message Queue | loadq
|
Load's purpose in life is to find files, identify their type, eliminate their contents based on known-good MD5 hashes, put the meta-data about the file into a database, contents into a depot, then send messages to other ETL processes that have registered to receive that type of file.
Usage
load.exe T:\Bob.E01
Capabilities
Load can ingest the files and folders. If the file is one of the following disk image formats, it will be opened, partitions and filesystems navigated, freespace gathered, files carved, etc.
The following file systems are supported
